<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi All,</p>
<p>Section 10 (Reverse delegation) of the CPM relates, specifically
10.5 "Validity of the Reverse Delegation".</p>
<p>10.5.2 No Reverse DNS service absent of registered assignments:</p>
<ol>
<li>No reverse delegation of administered/allocated IP address
space is allowed unless an assignment or sub-allocation from the
specific address allocation is registered appropriately in the
AFRINIC whois database. </li>
<li>For a /24 reverse delegation, at least one assignment or
sub-allocation must be registered in the AFRINIC Database for
that specific /24. The entire /24 does not have to be assigned
in order for the reverse delegation to be allowed.</li>
</ol>
<p>Herein lies a problem when one needs to update inet(6)num
objects.</p>
<p>For example, if in the db you have:<br>
<br>
inetnum: 10.0.0.0/22<br>
domain: 0.0.10.in-addr.arpa<br>
domain: 1.0.10.in-addr.arpa<br>
domain: 2.0.10.in-addr.arpa<br>
domain: 3.0.10.in-addr.arpa<br>
route: 10.0.0.0/22<br>
<br>
Now assume you want to delete inetnum for 10.0.0.0/22, at this
point (whether you're deleting by way of email update, whois web
or via my.afrinic) you will get the following errors:<br>
<br>
This object can not be deleted because a child object [domain]
0.0.10.in-addr.arpa exists.<br>
This object can not be deleted because a child object [domain]
1.0.10.in-addr.arpa exists.<br>
This object can not be deleted because a child object [domain]
2.0.10.in-addr.arpa exists.<br>
This object can not be deleted because a child object [domain]
3.0.10.in-addr.arpa exists.<br>
This object can not be deleted because a child object [route]
10.0.0.0/22AS64512 exists.<br>
<br>
I'm not sure what part of the policy dictates that the route:
object must block the inetnum deletion, but it's plain that when
removing the inetnum object for 10.0.0.0/22 the 4 domain: objects
would be in violation of 10.5.2.<br>
<br>
There is no specific constraint that I can find in the policy
(although I would consider this obvious) that an entity may only
submit domain: objects for ranges that has been allocated to it
(ie, for which it's the org).<br>
<br>
The operational problem is that in order to bring your assignments
and sub-allocations up to date, you have to temporarily delete the
domain: (and presumably the route: - in some cases) objects.<br>
<br>
I would like to propose that the entirety of 10.5 be removed, such
that afrinic staff can update the rules in the whois database to
not enforce the above.<br>
<br>
Before doing so, does anybody have any recollection of why this
was put in place in the first place? Or potentially have any
reason for wanting to keep it in place?<br>
<br>
Kind regards,<br>
Jaco</p>
</body>
</html>